You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "David Graff (JIRA)" <ji...@apache.org> on 2013/05/03 19:52:17 UTC
[jira] [Issue Comment Deleted] (HTTPCLIENT-1349) SSLSocketFactory
incorrectly identifies key passed with keystore as the keystore password.
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Graff updated HTTPCLIENT-1349:
------------------------------------
Comment: was deleted
(was: [~olegk] if you can give me some advice on how to propagate this back as a patch - with adding the new keystore I don't know how to include that in the patch - would a zip file containing the patch and the keystore suffice?)
> SSLSocketFactory incorrectly identifies key passed with keystore as the keystore password.
> ------------------------------------------------------------------------------------------
>
> Key: HTTPCLIENT-1349
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1349
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpClient
> Affects Versions: 4.2.4, 4.2.5
> Reporter: David Graff
> Priority: Minor
> Fix For: 4.2.6
>
> Attachments: httpclient-4.2.x-SSLSocketFactory-w-test-keystore.zip
>
>
> The constructor signatures for SSLSocketFactory incorrectly identify the password passed as the keystore password. The password passed is, in fact, used by the key manager for private key recovery. If the keystore has one password and the private key has a different password this method will fail if only using the keystore password.
> I have attached a patch to this covering the changes to this.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org